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(57) ABSTRACT 

A system for copy protecting content information has an 
arrangement for receiving and controlling the playback of 
encoded video. The video content, e.g. MPEG compressed 
digital video, is watermarked and includes a control signal 
indicating the status (e.g. playback only, one generation of 
copy allowed, etc). In the receiver device a check is per- 
formed to allow playback in dependence of the watermark. 
The watermark is extracted in a separate decoder device, 
such as an external MPEG decoder. The receiver device 
starts the playback via the external decoder, and the separate 
decoder communicates retrieved watermark information via 
a link to the playback device. The playback device checks 
the watermark information against further supplemental 
information, such as a physical mark on the record carrier or 
the control signal. Said communication may be protected by 
cryptographic methods, such as a digital signature. 

18 Claims, 3 Drawing Sheets 
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SYSTEM FOR TRANSFERRING CONTENT It is an object of the invention to provide a more flexible 

INFORMATION AND SUPPLEMENTAL system for controlling the playback of content information 

INFORMATION RELATING THERETO in dependence of supplemental information. For this 

purpose, the system according to the invention is character- 

The invention relates to an arrangement for receiving via 5 ized in that the arrangement comprises a decoder device 

a transfer signal encoded content information and supple- comprising the decoder and the detector, which decoder 

mental information, which content information comprises a device is arranged separately from the receiver device, and 

watermark at least partly representing the supplemental in that the receiver device and the decoder device comprise 

information, the arrangement comprising a receiver device linking means for communicating the watermark informa- 

for receiving the transfer signal, a detector for detecting 10 tion between the detector and the control means. This has the 

watermark information in dependence on the watermark, effect, that the complex content information decoder, which 

and a decoder coupled to an output of the receiver device for is present in a reproduction device, is used to perform the 

decoding the content information, which receiver device detection of the watermark, and communicates the result 

comprises control means for controlling the reproduction of back to the receiving device. The receiving device controls 

the content information in dependence on the supplemental 15 the output signal in dependence of the communicated 

information. results. This has the advantage, that a high quality 

Such a transfer system is known from WO 97/13248, watermark, embedded within the encoded content signal, 

document Dl in the list of related documents. In the transfer can be detected with very low additional complexity of the 

system information is transferred from the transmitter via a receiving and decoding arrangement, 

transfer signal to a receiver device, e.g. from a video 20 According to a first aspect of the invention a receiver 

producer via an optical disc to a disc drive for playback. The device for use in the arrangement is characterized in that the 

document describes that video and audio content is in ere as- Unking means are arranged for communicating with the 

ingly transmitted and recorded in a digitally encoded form, decoder device for receiving the watermark information, 

for example, an MPEG bitstream. There is a growing need According to a second aspect of the invention a decoder 

to transfer supplemental information logically related to the 25 device for use in the arrangement is characterized in that the 

content information, which supplemental information is linking means are arranged for communicating with the 

intended for controlling the reproduction of the content receiver device for transmitting the watermark information, 

information. The supplemental information may comprise This has the advantage, that both devices can be produced 

information on the rights of the owner or originator of the separately and the total system cost is low, while a high 

content information. For example a marker is to be accom- 30 quality watermark is used resulting in a high resistance 

modated in such an encoded signal so as to classify the against manipulation of the supplemental information, 

encoded signal as authentic program material. Marking An embodiment of the receiver device or the decoder 

digital signals is particularly useful in copy protection device is characterized in that the linking means comprise 

applications, wherein the supplemental information indi- means for securing the communication against tampering. In 

cates the copyright status. Therefore the supplemental infor- 35 particular, the means for securing the communication com- 

mation should be protected against manipulation. The mark, prise means for encryption or decryption, and/or for 

also referred to as watermark, can effectively take the form authentication, and/or for exchanging random numbers, and/ 

of a multi-bit watermark pattern representing some supple- or for providing or verifying a digital signature. This has the 

mental information, e.g. indicating that the encoded signal advantage that malicious parties are facing additional diffi- 

constitutes copy protected content. In a digital video system, 40 culties when trying to manipulate the supplemental infor- 

e.g. based on the digital videodisc (DVD), copy control can mation. 

be based on detection of electronic watermarking. Water- These and other aspects of the invention will be apparent 

marks are minor, imperceptible modifications to the video, from and elucidated further with reference to the embodi- 

which can be detected electronically. Such watermarks can ments described by way of example in the following 

be resistant to typical signal processing, including format 45 description and with reference to the accompanying 

conversions (e.g. PAL to NTSC), and can be detected to drawings, in which 

retrieve copyright information about the video. Watermarks FIG. 1 shows playback control and the basic flow of 

are used for playback control. The basic idea of playback video content, 

control is that any drive refuses to pass video content if that FIG. 2 shows a one-copy feature, 

content contains a watermark that classifies the video as 50 FIG. 3 shows the function of the copy-once ticket, 

being no-copy while that video is found on a recordable FIG. 4 shows the generation of a valid copy on a 

medium. Hence playback control requires detection of the recordable carrier, 

watermark within the drive, and a detector should be on the FIG. 5 shows a system with separate watermark 

same chip as the drive control electronics or on the same detection, and 

circuit board in the drive. Noise-like, pixel-domain water- 55 FIG. 6 shows a system with separate watermark detec- 

marks are not suitable for detection by a detector in the tion and a secure link. 

receiver device, because the complexity of the detector has Corresponding elements in different Figures have iden- 

to remain below a few thousand gates, as drives and DVD tical reference numerals. 

RAM recorders are designed as simple storage devices An important application of the invention is copy 

without any 'intelligence' to interpret data. Watermark 60 protection, the supplemental information being copy control 

detection would imply that such devices have process the information. A system for copy protection of recorded 

content data, e.g. to demultiplex and interpret MPEG video signals, an information carrier and reading device are known 

streams, at least including run-length Huffman decoding of from EP-0545472 (document D2). Further relevant details 

DCT coefficients. Hence a requirement of simplicity of about adding watermarks and control signal can be found in 

playback control can not effectively be met by pixel-domain 65 the related documents D3, D4 and D5. In the description 

watermarks. So the known system has the problem, that the below a complete copy control system is described not only 

drive must be provided with a complex watermark detector. including a technology for electronic pixel-domain 
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watermarking, but also methods to resolve remaining system The detector/controller 13 inhibits playback, if a state 

issues relating to the embedded signalling of copyright 'Never-copy' is detected in combination with a Recordable 

states. In particular, this system has been developed taking media. Video content is watermarked with data indicating a 

the following systems aspects into account. Casual home variety of attributes. This includes copy said protection 

copying can effectively be stopped by fairly simple technical 5 states. The copy protection states which are considered are: 

measures. Large scale pirates have ample technical means to a) one-copy, b) no-more-copy, c) oevcr-copy and d) free 

circumvent any protection, because the number of these copy. In an embodiment the content contains one of two 

large operations is limited, they can be challenged in court. categories of watermarks, either the watermark classifies the 

However, the category in between, the small-scale pirates content as status a or b or as status c. Distinction between 

running cottage or garage factories, may be too small to 10 state a and b is provided by a control ticket. The system 

attack through legal actions. Meanwhile these pirates often concept is arranged for effective copy control, distinguishing 

have sufficient facilities for tampering with recording the roles of DVD drives, MPEG decoders, encoders and 

devices, to overcome conditional record protection measures DVD RAM encoders for (re-)encoding in the home envi- 

of their own equipment However, pirates have no access to ronment. In its most basic form the player or drive tests the 

the devices installed in the homes of their potential custom- is copyright state of the content and refuses to play content that 

ers. This suggests that the best measure against small scale is illegally found on media that are not original. In an 

piracy is playback control. Playback control is regarded as embodiment the medium contains a physical mark which at 

an important to the strength of a copy control system. The least distinguishes Read Only (RO) and RAM discs. An 

system includes playback control because it can be con- important function of the system is to prohibit playback of 

ducted in a simple disc drive or other storage device which 20 state c content from non-original media. A first improvement 

does not have facilities to process and interpret the stored is to cryptographically relate the physical mark to the 

"bits and bytes". It is a technological challenge to conduct watermark of the content as described in document D4. It is 

playback control in spite of the "dumbness" of such drives. cryptographically unfeasible to compute the physical mark 

A common attack on copy protection based on Record from the watermark content This physical mark is embed- 

Control only is that a pirate disables the watermark checking 25 ded on the disc but cannot be read or recovered externally of 

functionality. Conditional playback avoids that discs pro- the drive. During mastering of the RO disc, the bit content 

duced by such hacked recorder can be played. This is of the physical mark is generated from seed information 

reflected in the requirement that a watermark can be read in provided by (and only known to) the content owner. Physical 

appropriate (digital) domains and with limited complexity. markers reserved for RO and RAM can be distinguished 

The current state of the art enables the use of electronic 30 from one another. For a casual copier it is impossible to 

watermarking for copy control. Complexity of detector is a insert the physical mark of RO content on a recordable disc, 

problem. Typically, detection is feasible as part of the MPEG even if he happens to know the bit content of the physical 

compression or decompression algorithm. On the other marker. It should also be recognized that small-scale piracy 

hand, in order to come to a reliable copy control scheme, will be attempted, using read-only disc-pressing equipment, 

detection has to be performed at the (playback) drive and the 35 This is already a common method used for large and small 

recorder. A watermarking method is required that allows a scale pirating of audio CDs and CD ROM's. It becomes 

copy-once feature, which is described in document D5. The economically attractive to publish on (silver) CD RO instead 

copy-once mechanism included in this system is designed of (golden) CD Recordable, if the size of the order is above 

such that it does not provide a hook for hackers to break the about a few hundred discs. This shows that small scale 

strength of the entire copy control system. It should be 40 piracy through RO is attractive already at small quantities, 

considered as a general rule that adding extra features to the Similar attacks with DVD read-only is not adequately coun- 

copy control system, which allow copy-once or which allow tered if the detector in consumer players only check for 

users to record their own personal creations facing minimal recordable and read-only media, without checking the rela- 

restrictions, should not compromise the security of the copy tion between the origin of the read-only medium and its 

control concept. While the watermark detection has to be 45 content. For a small scale pirate who wants to order a 

simple and computationally inexpensive, it has to withstand publishing house to press a certain quantity of discs, it is 

signal processing applied to the content. Upgrading copy- technically difficult to find the bit value of the physical 

control measures has several disadvantages. Compatibility marker. Moreover, he would have to provide the publishing 

requirements limit the extent to which systems can be house with the seed, instead of the physical marker itself. It 

modified. Moreover, a scenario in which iterative ly hackers 50 is cryptographically unfeasible to compute the seed from the 

break the system and the industry increases the measures is physical mark. RO Discs produced with a generic physical 

costly and ineffective. Hackers become strongly motivated mark will not play content with a specific watermark that 

by initial successes and committed to again breaking any requires a particular bit combination of the physical mark, 

improved systems. Starting the protection through a suffi- FIG. 2 shows a one -copy feature. The record carrier 21 

cientry strong barrier, as presented in this system, avoids that 55 carries watermarked video content 22, but also carries 

pirates can break the system at reasonable cost and easily separate control signal, e.g. a copy control tickct(s) T such 

earn profits from their activities. as a Play Ticket 25, having a state token * Playback only' 25, 

FIG. 1 shows playback control in a playback system and and/or a Copy Ticket 26 having three consecutive tokens for 

the basic flow of video content. The video content is Playback only 27, Record 28 and Playback copy 29. One 

physically transferred to a receiver device 10, e.g. a drive 60 copy content is watermarked, such that it can be detected as 

reading information from a record carrier such as an optical being in state a or b. Any recorder and any player which 

disc 11 or a tape 12. The receiver device retrieves the detects such watermark, assumes that the content is in state 

information from the record carrier and the retrieved infor- b (no more copy) unless an explicit authorization for record- 

mation is passed on to a detector/controller 13, which detects ing or playback is granted in the form of the cryptographic 

copy protection information. If the video content is allowed 65 ticket T. This ticket can be stored on a legally copyable disc 

to be displayed, the encoded content signal is decoded and or included during transmission. Essentially, playback and 

a video signal is passed on to a Video monitor 14, e.g. a TV. recording of watermarked material only occurs if the appro- 
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priate authorization ticket is present. For copy-never A playback device always checks the Physical mark P on 

content, the play ticket is provided as a physical mark on the the disc. If the devices plays video, it always passes the copy 

disc. For the playback control as it is effectuated by a drive, control ticket through the one-way function. Playback will 

the playback rules are now as follows. Playback of content only take place if one of the following conditions is met: The 

is allowed if one of the following situations apply: 5 disc contains a physical mark P reserved for professional 

The content is watermarked in state c and the physical content. The content on the disc contains a watermark W. 

mark agrees with the watermark in the content The player further checks the validation ticket. Playback 

The content is watermarked in state a/b and the authori- occurs if one of the following conditions is met: 
zation mark agrees with the watermark in the content. 

The content has no watermark, i.e., state d (free copy) io 

FIG. 3 shows the function of the copy-once ticket. A ~ T ™ ~ „, , , . TTT 

the ticket T and removes one token dlustrated by clipping The relation w - F(F(F(T))) is satisfied 

action 37. The drive must pass a 'clipped* COpy ticket 38 to No-more Copy: The relation W - F(P) is satisfied. 

its output, optionally after an MPEG decoder 33. The ticket 



38 must allow a recorder 35 to copy the content (optionally 15 j* ♦ • u-i in jr jli 

after an encoder 34) and a next player to play ite copied ^ > disccontains a physical mark P reserved for recordable 

content. After these transitions, no fiirther copies are £os- mc * a - ™ c content contains a valid W watermark used for 

sible. The ticket changes state during every passage of a professional recording The validated copy-once T is 

playback and recording device. Such state modifications are P resent > and W -F(T>. Alternatively the content is identified 

cryptographically irreversible and reduce the remaining 20 ^ a nome recording of a user's personal creation (e.g. by 

copy and play rights that are granted by the ticket. The ticket checking watermark) 

is clipped (cryptographically modified) during each play- The recorder always passes the copy control ticket 

back or recorder passage. The system allows the casual through the one-way function before transferring it to disc, 

consumer to make any number of first generation copies Recording of copyrighted content is allowed only if the 

from the original. Subsequent copy is recognized such that 25 watermark in the stream matches W=F(F(T)). If an attacker 

additional serial copies would not be allowed. In this case manages to modify his recorder and record audio even if the 

the recording drive system would detect the "one-copy" appropriate T is not present, a normal player will reject to 

state and modify the first state or record an additional state playback the disc. 

on the recordable media to indicate that the content is now A professional title is produced by initially generating a 
copy protected (i.e. "no-more-copy"). Subsequent detection 30 seed TJ. From this seed, the following variables are com- 
by the above control systems would prevent recording and puted: P=G(U), and T=(F(F(U)) which we denote as F 2 (U). 
allow playback. For a disc that the customer is allowed to copy n-times, a 
FIG. 4 shows the generation of a valid copy on a record- watermark W is created as Wo^fl). The one-way func- 
able carrier. An original record carrier containing video or tion G and variable P may be specified such that P also 
audio is played back in a playback system 41. A recordable 35 contains an identifier for the publisher or a serial number of 
media 43, such as an optical disc 44 or a tape 45, is recorded the mastering machine. If a pirate publisher attempts to write 
in recording drive system 42. The recording drive system 42 a particular P, in order to make a bit-exact copy of a 
records only, if the 'one-copy' state is detected, and then also copyright disc, that pirate must tamper with his DVD press, 
the state is modified to 'no-more-copy* on the recordable The above scenario assumes watermarks to be detected 
media. The basic record control is designed to prevent a 40 with the drive and within the recorder. However, pixel- 
casual consumer from copying "never-copy" and "no-more- domain watermarks are not suitable for detection by most 
copy** material onto a recording device. The recording ordinary digital devices in the chain if the complexity of the 
device would detect the watermark and inhibit copy of the detector has to remain below a few thousand gates. Drives 
content, if 'Never-copy' or 'No- more-copy 'state is detected. and DVD RAM recorders are designed as simple storage 
The modified state is passed on the recordable carrier as a 45 devices without any 'intelligence' to interpret data. Water- 
new ticket T. The ticket contains multiple validation tokens. mark detection would imply that such devices have to 
During each playback and recording step, one token is demultiplex and interpret MPEG streams, at least to the 
removed. Ticket T carries the information about how many depth of run-length/Huffman decoding of DCT coefficients, 
generations of copies still are allowed. It indicates the On the other hand, it appears to be critical to the strength of 
number of sequential playback and recordings that can be 50 the copy control system that play and record control is 
done. For a no-copy signal, T specifies that only playback is effectuated within the drive and within the recorder, rather 
allowed. A copy-once signal on a professionally-produced than 'somewhere' half-way the chain. These requirements 
disc carries a ticket for 3 passages: playback, recording, (simplicity and effective location of play/record control) can 
followed by another playback. When in transit from a player not be met simultaneously by pixel-domain watermarks, but 
to a recorder, such a signal carries a ticket for 2 passages. 55 can be met by introducing MPEG "PTY" marks as described 
Since Ticket T is related to the watermark W, a ticket for a in document Dl. Within the MPEG standard the parameter 
given title can not be misused to record another title. The * picture type' is abbreviated as PTY, we adopt the name PTY 
ticket acts as a cryptographic counter that can be decre- marking for embedded signaling that is based on intention- 
mented but not incremented. The counter value is decre- ally modifying the PTY sequence in a video stream. The 
mented by feeding the bits through a cryptographic one-way 60 disadvantage of PTY marks is their inability to survive 
function. This implies that ticket T in tie stream is replaced analogue transmission. As shown in FIG. 3, the copying may 
by T=F(T) during each recording or playback operation, be performed by decoding the MPEG signal and encoding 
whereby F is a publicly known cryptographic one-way the video again before recorded. So the system may use the 
function. Neither the player nor the recorder pass T trans- properties of several techniques (pixel domain watermarks, 
parently. The system does not rely on a global secret. From 65 MPEG PTY marks and physical marks and authorization 
a cryptographic point of view it is not necessary that F is ticket). An embodiment of the system concept combines 
kept secret to potential attackers. various watermarking methods. Throughout the entire chain 



09/10/2003, EAST Version: 1.04.0000 



US 6,314,518 Bl 

7 8 

of content transmission, pixel domain watermarks are According to the invention the detection of the watermark 

present, but effectively these are only detectable in MPEG is outside the drive, and takes place in a compliant decoder, 

decoders and encoders. The pixel domain watermark plays e.g. an MPEG decoder. In a embodiment additional security 

the role of inseparable carrier of copyright attributes. The measures are taken to further improve the copy protection, 

most important property of the pixel-domain watermark is 5 while playback control may still be effectuated in the drive, 

that it survives not only analogue transmission but also The secure system is protected against two attacks: 

many digital manipulations. The attacker may replace the MPEG stream coming out of 

It is understood that the reliability of this concept depends lhe drive by mo}htT slreaiDj which has a foe^y 

on whether the detection of recordable media can be misled. sUtus ^ MpEG decoder ^ delec , n0 watermark 

One method is to insert fake signals into the detection circuit ^ report m ^ to me <jrive 

that distinguishes between recordable and Read-Only media. ~, „ , . ' c . . 

IWor the detection needs to be performed as much ^ att * c ker mav the message from the Nff EG 

upstream, i.e. close to retrieving the signals from the record decoder and re P Ia 7 ce 11 bv a messa g e thal lhe MPEG 15 

carrier, as possible, in particular in the drive. This implies n01 watermarked (free copy) 

that also the watermark check must be conducted The MPEG decoder, or a small entity (software or hardware) 

"upstream". However, the inventors have seen that drives 15 physically associate with the MPEG encoder, e.g. a chip on 

may playback without checking for watermarks if the water- mc decoder board, does the watermark detection. In the 

mark is detected separately. Preferably the watermark infor- MPEG encoder substantial signal processing facilities are 

mation is transmitted over a secure (confidentially against available, so the addition of a watermark detector usually 

snooping, plus authentication and integrity) link to a com- does not excessively burden the overall complexity of the 

pliant MPEG decoder. 20 decoder. 

FIG. 5 shows a system with separate watermark detection. In a first embodiment of the system, as shown in FIG. 5, 

A record carrier 51 carrying a physical mark P and video no protection of the link is guaranteed by cryptography. If 

content watermarked with a watermark W, is played in a the drive unit is part of a PC system, an attacker may provide 

drive 52. The drive has information reading means 53, e.g. software algorithm to his customers that modifies signals 

an optical read head, channel decoder, and an error corrector 25 floating over the PC bus, but customers may be less willing 

of a known type, such as for CD or DVD. The reading means to accept such intervening software. Moreover these algo- 

also comprises a control unit which has the function to detect rithms can not be place in consumer electronics (non-PC) 

the physical mark P, and to control a control switch 54, DVD players. Thus the value of such copies are essentially 

which blocks the output in dependence of the copyright reduced, and the first embodiment still provides acceptable 

information. Alternatively or additionally a blocking switch 30 copy protection. 

or similar output enabling means can be located in the FIG. 6 shows a system with separate watermark detection 
decoder unit, the output enabling means being controllable and a secure link. The secure link comprises a forward 
by the control unit in the drive via a forward link. The drive secure path 63 and a backward secure path 64. Like in FIG. 
as shown in FIG. 5 can pass on clear content to a compliant 5 the record carrier 51 is played in a drive 52. The drive has 
MPEG decoder 57 via link 55, because the watermark 35 information reading means 53, which comprise the control 
detection takes place in the external MPEG decoder 57. The unit to control the control switch 54. The output is coupled 
information about the presence of a watermark and possible to a compliant MPEG decoder 57 via forward secure path 
the supplemental information carried by the watermark is 63. The drive 52 comprises an encrypt unit 61 to encrypt the 
transferred back to the drive via a link 56. In an embodiment output signal from the drive using a crypto key 62, and the 
the drive 52 electronically signs the content, and the com- 40 encrypted output signal is coupled via the forward secure 
pliant MPEG decoder 57 returns a watermark with appro- path 63 to a decrypt unit 66 in the decoder 57. The decrypted 
priate signatures. The drive than checks whether the ticket is output is passed on to the MPEG decoder 68, which is 
valid for content with that watermark. If the recorder and coupled to monitor 58 via the video output. A watermark 
player accept to playback concept without a PTY mark, this detector 69 is coupled to the MPEG decoder 68, and any 
opens several opportunities for attacks. A hacker may 45 detected watermark information is encrypted in a second 
attempt to copy video content by offering it in uncompressed encryptor unit 67, and transferred via backward secure path 
form to an MPEG encoder, which does not check for 64 to the drive unit 52 and decrypted in decrypt unit 60, 
pixel-domain watermark. This stream is then offered to which passes the watermark information to the control unit 
recorders and drives, which would pass the content. Effec- in reading unit 53. In this second embodiment the link- 
tive copy control must therefor prohibit recording or play- 50 between drive and MPEG decoder is made secure by 
back of content that is free of PTY-mark, unless the drive can encryption. This implies that the drive and MPEG decoder 
compare a pixel-domain watermark with a physical mark or must share a common secret. This secret can be time 
ticket on the disc. If from a complexity point of view, the varying, if the two devices have a mechanism to generate a 
watermark detector can best be included into the MPEG session key. This solution relies in confidentiality of the data, 
decoder chip or at least on the decoder board, two options 55 In its basic form, it does not protect against exactly bit- 
can be thought of for the location of the pixel-domain copying the data flow from drive to decoder, 
detector. In a third embodiment the drive unit and the decoder go 
It should be anticipated that typical recording drive sys- through an authentication process first. For example, an 
terns only receive bit and bytes, without side information existing encryption system like the Content Scrambling 
about the contents. Recorders may accept marked content, 60 System (CSS) of the DVD could be used authenticate. Also 
e.g. PTY marked, if appropriate tickets are presented. the CSS scheme can be modified to perform the encryption 
Recorders may record content without checking for water- and decryption functionality on the entire MPEG stream. * 
marks only if received over a (secure) link from a compliant In a fourth embodiment the MPEG stream itself, which 
MPEG encoder. Recorders may accept content without requires a high bit-rate is not encrypted, but the drives 
detecting the watermark itself, if the content plus a cleartext 65 hashes, adds a random number and signs the MPEG stream 
version of the watermark bits are signed by a compliant and using well known cryptographic algorithms like RSA or 
authorized device (e.g. an MPEG encoder). DSA. The MPEG decoder then verifies the signature, detects 
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the watermark and send a message back to the drive. This signal by a key known to the destination only, e.g. a key 
message contains the retrieved watermark bits concatenated build in specific reproducing devices or a public key sup- 
to the random number and the signature as it was placed by plied by the destination using a public key system (e.g. 
the drive, and MPEG decoder signs this message again. The rsa). Also the encoded signal and/or the control signal may 
random number avoids replay attacks, but is not absolutely 5 additionally be protected by scrambling or encryption 
necessary. Alternatively the backward message may be methods, or may be additionally provided with a digital 
encrypted, because for this message a low bit-rate is suffi- s i gnaturc . Furt her, the invention lies in each and every novel 
ClC ^' . i - feature or combination of features, including those within 

The above solutions have the disadvantage that crypto- me meri tioned incorporated or related documents, 

graphic secrets need to be known by the drive and the MPEG 10 

decoder device; Moreover, encryption of the entire MPEG Lis* of Related Documents 

S ^ am i!. DOt { aV ?. rable * (Dl) WO 97/13248-A1 (PHN 15391) Watermarking 

In a firth embodiment the burden of checking hashes is not encoded signals 

placed with the drive or with the decoder, but instead is ^ EP-0545472 (PHN 13922) Closed information system 

performed by the MPEG encoder. The compliant MPEG 15 ^ physical ^ protcction 

encoder already pre-computes a set of values, which it (D3) wo IB98/00040 (PHN 16209) Watermarking of 

provides to me recorder and the drive. Bitstream- or DSD-signals (A.A.M. Bruekers et al.) 

The dnves selects on >of these values and uses this choice (D4) wo IB9 8/0O085 (PHN 16210) Copy protection 

to challenge the MPEG decoder. It asks the decoder to method for storage media 

perform the watermark check and to perform particular hash 20 ^ wo i B 98/00087 (PHN 16372) Copy control with copy 

operation and to cryptographically sign the resulting num- n-times feature 

bers. This result is checked by the drive. For instance the Wnat ^ chimed is* 

MPEG encoder prencomputes several hash values over the j M ^^menl for reproducing encoded content infor- 

MPEG content. The hash values are each computed in a mation comprising* 

slightly different manner, e.g. by concatenating a particular oc . r . . - . , t . . 

j / • j * * \ Ti . . ™_ % - • 25 receiver means for receiving a transfer signal containing 

predetermined string m f to the content. Thus for various i , . i • *■ j j j . . * r 

Fi=l 2 N) supplemental mformation and encoded content infor- 

^ ° ' ' -V „ , _ m „„ , , mation that includes a watermark at least partly repre- 

compute h^HashtMPEGstreamK seating the supplemental infonnation, 

MPEG content plus the set of hash values are stored on the iL . . t 

j • t j c the receiver means mcludmg: an output for providing the 

disc m encrypted rorm. 30 t . . - . j * . e 

« r j i it. -i content information, and control means for controlling 

store c,oEocrypt[ena,der key|h,] reproduction of the content information depending on 

The dnve at random p.ctei, that » selects one of the hash J supplemental information; 

functions and has values. The dnve passes the MPEG but not , . . r a . , i ■ r 

the hash value to the MPEG decoder. The drive informs the detector means for detecting watermark information 

MPEG decoder about which hash (which i) to compute. The 35 . de P endu3 g OQ ^ watermark; 

MPEG decoder returns the watermark W, plus the appro- decoder me: f> «™Pkd * «» output of the receiver 

priate hash value h- and signs this message. means and for decoding the content information to 

store s-Encrypt[decoder keyfcj «piodua the content information; and 

The drive then compares decoded versions of s f - with C/ . If a decoder device «■» decoder means and the 

the encoder and decoder keys are identical the drive can 40 detector means and ranged separately from the 

simply check whether s.-c,-. receiver means ' 

In a sixth embodiment the drive unit comprises means for and hiking means for providmg the watermark informa- 

detecting the presence of content information on a record 11011 from the detector means to the control means, 

carrier, e.g. by detecting the structure of an MPEG encoded 2 - ^ arrangement of claim 1, in which the linking means 

video signal. As soon as the content is detected a commu- 45 are arranged for communicating with the decoder device for 

nication protocol with the MPEG decoder is started for receiving the watermark information, 

exchanging watermark information as described above. 3. The arrangement of claim 2, in which the control means 

Other content, such as computer programs, can be read from include an output control switch for controlling the output of 

the record carrier without playback control. Alternatively all ^ content information from the receiver, 

content read from the record carrier is routed to or via the 50 4 - ^ c arrangement of claim 1, in which the linking means 

MPEG decoder, and the MPEG decoder starts the protocol are arranged for communicating with the receiver means for 

only if an MPEG signal is detected. transmitting the watermark information. 

Although the invention has been explained by an embodi- 5 * ^ arrangement of claim 4, in which the decoder 
ment using a disc as recording medium, it will be clear that device is arranged for decoding video content information 
other systems for transferring information can be employed 55 and for detecting a pixel domain watermark, 
in the invention. For example, the encoded signal and the 6 - ^ arrangement of claim 4, in which the decoder 
control signal may be transferred via a data-network like the dcvice includes output enabling means, which are control- 
internet, kbte DV the control means in the receiver means via the 

Whilst the invention has been described with reference to linking means, 

preferred embodiments thereof, it is to be understood that 60 7 - ^ arrangement of claim 1, in which: 

these are not limitative examples. Thus, various modifica- the control means include an output control switch for 

lions may become apparent to those skilled in the art, enabling the output; 

without departing from the scope of the invention, as defined the receiver means includes reading means for retrieving 

by the claims. For example, the encoded signal might be the transfer signal from a record carrier, 

distributed on a read-only disc or tape, while the control 6S the reading means are arranged to detect a physical mark 

signal might be distributed separately. Unlimited use of the on the record carrier, which physical mark is indicative 

control signal might be prevented by encrypting the control of the origin of the record carrier; 
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the receiver means includes means for receiving a control 
signal which at least partly represents the supplemental 
information; 

the control means are arranged for verifying a relationship 
between the control signal and the watermark informa- 5 
tion; 

the receiver means includes recording means for record- 
ing the content information on a record carrier; 

the control means are arranged for controlling the record- 
ing depending on the supplemental information; 

the receiver means includes means for detecting the 
presence of content information on a record carrier; 

the linking means are arranged for communicating with 
the receiver means for transmitting the watermark 15 
information; 

the decoder is arranged for decoding video content infor- 
mation and for detecting a pixel domain watermark; 

the decoder includes output enabling means, which are 
controllable by the control means in the receiver means 20 
via the linking means; 

the linking means include means for securing the com- 
munication against tampering; and 

the means for securing the communication includes one or 25 
more of: means for encryption or decryption, means for 
authentication, means for exchanging random numbers, 
or means for providing or verifying a digital signature. 

8. The arrangement of claim 2, in which the receiver 
means includes reading means for retrieving the transfer 30 
signal from a record carrier. 

9. The arrangement of claim 2, in which: 

the receiver means includes means for receiving a control 
signal which at least partly represents the supplemental 
information; and 35 

the control means are arranged for verifying a relationship 
between the control signal and the watermark informa- 
tion. 

10. The arrangement of claim 2, in which the receiver 
means includes recording means for recording the content 40 
information on a record carrier; and 

the control means are arranged for controlling the record- 
ing depending on the supplemental information. 

11. The arrangement of claim 2, in which the receiver 
means includes means for detecting the presence of content 45 
information on a record carrier. 

12. The arrangement of claim 2, in which the linking 
means include means for securing the communication 
against tampering. 

13. The arrangement of claim 12, in which the means for 50 
securing the communication include one or more of: means 
for encryption or decryption, means for authentication, 
means for exchanging random numbers, or means for pro- 
viding or verifying a digital signature. 

14. The arrangement of claim 13, in which the reading 55 
means are arranged to detect on a record carrier, a physical 
mark indicating the origin of the record carrier. 



15. A receiver for receiving via a transfer signal, supple- 
mental information and encoded content information that 
includes a watermark at least partly representing the supple- 
mental information, the receiver comprising: 

output means for providing information including the 
watermark to a detector for detecting watermark infor- 
mation; 

control means for controlling reproduction of the content 
information depending on the supplemental informa- 
tion; and 

linking means for communicating the watermark infor- 
mation from the detector to the control means. 

16. The receiver of claim 15 in which: 

the receiver further comprises recording means for 
recording the content information on a record carrier; 

the control means are arranged for controlling the record- 
ing depending on the supplemental information; 

the receiver further comprises means for detecting the 
presence of content information on a record carrier; 

the linking means are arranged for communicating with 
the receiver for transmitting the watermark informa- 
tion; 

the linking means include means for securing the com- 
munication against tampering; and 

the means for securing the communication includes one or 
more of: means for encryption or decryption, means for 
authentication, means for exchanging random numbers, 
or means for providing or verifying a digital signature. 

17. A decoder for decoding a transfer signal including 
supplemental information and encoded content information 
that includes a watermark at least partly representing the 
supplemental information, the receiver comprising: 

detector means for detecting watermark information 

depending on the watermark; 
decoder means for decoding the content information; and 
linking means for communicating the watermark infor- 
mation between the detector means and a control means 
of a receiver. 

18. The decoder of claim 17, in which: 

the linking means are arranged for communicating with 
the receiver means for transmitting the watermark 
information; 

the decoder is arranged for decoding video content infor- 
mation and for detecting a pixel domain watermark; 

the decoder includes output enabling means, which are 
controllable by the control means of the receiver via the 
linking means; 

the linking means include means for securing the com- 
munication against tampering; and 

the means for securing the communication includes one or 
more of: means for encryption or decryption, means for 
authentication, means for exchanging random numbers, 
or means, for providing or verifying a digital signature. 
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